Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/sq-qRAstZZOhKf6qKg_DHRo8X4E.mft
File: sq-qRAstZZOhKf6qKg_DHRo8X4E.mft (raw, json)
Hash identifier: mPSC61RNR4iisJL4EKlDc69wJOaUoFPDlL5HDencEYQ=
Subject key identifier: E7:4E:4A:79:43:96:9C:CC:F4:5E:1D:65:63:23:0F:C4:80:AC:02:7C
Authority key identifier: B2:AF:AA:44:0B:2D:65:93:A1:29:FE:AA:2A:0F:C3:1D:1A:3C:5F:81
Certificate issuer: /CN=b2afaa440b2d6593a129feaa2a0fc31d1a3c5f81
Certificate serial: 01A08D8DF817D8B555DC7B0D5236EF05B4AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq-qRAstZZOhKf6qKg_DHRo8X4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/sq-qRAstZZOhKf6qKg_DHRo8X4E.mft
Manifest number: 01A1
Signing time: Thu 10 Sep 2026 23:01:26 +0000
Manifest this update: Thu 10 Sep 2026 23:01:26 +0000
Manifest next update: Fri 11 Sep 2026 23:01:26 +0000
Files and hashes: 1: 3v3q9uaO0I3Nwhq561xaonM_DTU.roa (hash: MppwYTWzIUYUlGXSC1GNbatY5HoguqVx5TkngM8EEDQ=)
2: sq-qRAstZZOhKf6qKg_DHRo8X4E.crl (hash: MeCawqLcl/f0RvtuDQCLM57LeJsKwM+6yVvGcHrV4NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/sq-qRAstZZOhKf6qKg_DHRo8X4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/sq-qRAstZZOhKf6qKg_DHRo8X4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sq-qRAstZZOhKf6qKg_DHRo8X4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:f8:17:d8:b5:55:dc:7b:0d:52:36:ef:05:b4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2afaa440b2d6593a129feaa2a0fc31d1a3c5f81
Validity
Not Before: Sep 10 23:01:26 2026 GMT
Not After : Sep 11 23:01:26 2026 GMT
Subject: CN=e74e4a7943969cccf45e1d6563230fc480ac027c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:41:35:8a:20:3a:3c:c4:5a:66:67:cb:50:
63:ac:e7:94:3d:2c:e3:82:2a:cf:c3:da:5b:7e:cb:
1a:fb:ed:37:5b:cc:e1:a2:84:2e:f7:70:c7:56:51:
35:eb:4e:85:28:58:d2:00:62:4a:2b:c4:66:09:3c:
88:66:e1:24:d8:35:70:29:69:bf:e4:9b:aa:d8:7e:
4d:33:d7:f7:80:9c:bc:cc:55:b2:00:dd:45:c6:a3:
6e:f3:76:32:b8:01:6c:a5:02:18:57:2a:c4:52:94:
60:d5:d8:1a:53:c3:19:5c:91:4a:cb:f1:ec:fc:4c:
9b:60:22:cc:96:7b:16:e6:f5:e2:fa:ab:55:c0:48:
ff:4f:c7:d9:69:61:fa:a3:5a:ec:42:fc:53:c3:b3:
73:a9:d1:48:89:15:7e:07:13:01:94:6a:8f:9c:f9:
3f:cf:0f:86:63:ba:98:a7:2b:65:2f:48:fe:d2:e4:
e8:68:d2:a8:0a:9b:b8:71:41:6b:72:81:a9:d8:0d:
f3:b7:25:dd:0b:c5:12:f0:22:33:91:44:89:ca:76:
49:6a:d2:a9:cb:f4:49:5e:9a:50:63:19:e7:db:d5:
94:58:74:fa:43:51:f7:26:cb:a1:bf:42:76:9c:fc:
4a:2c:79:5d:21:02:c8:f9:36:be:b2:4b:c9:8e:f0:
29:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4E:4A:79:43:96:9C:CC:F4:5E:1D:65:63:23:0F:C4:80:AC:02:7C
X509v3 Authority Key Identifier:
keyid:B2:AF:AA:44:0B:2D:65:93:A1:29:FE:AA:2A:0F:C3:1D:1A:3C:5F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq-qRAstZZOhKf6qKg_DHRo8X4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/sq-qRAstZZOhKf6qKg_DHRo8X4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/sq-qRAstZZOhKf6qKg_DHRo8X4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:59:33:aa:68:eb:7d:1e:15:6d:af:13:10:0c:ce:fe:d2:0b:
a3:84:fa:1a:82:d1:e3:ed:d7:3d:ee:1b:98:00:98:47:54:52:
76:42:33:e5:14:25:9b:9c:05:68:65:cd:e4:1c:1a:9c:6f:00:
a5:58:07:58:64:0f:28:75:69:11:26:67:88:1d:ee:48:05:55:
25:3a:86:6c:12:03:71:0f:dc:75:70:ea:bc:dd:32:65:f1:99:
c5:b3:61:65:75:2e:13:01:63:83:0b:40:31:7f:a4:2a:61:31:
77:b9:c2:b2:54:dc:f2:eb:63:ce:63:81:47:a9:b7:8c:c0:1f:
63:02:29:10:c9:36:d6:db:fc:ab:b5:6b:88:16:ef:9a:9d:24:
e2:1a:aa:20:72:48:22:b7:bf:f3:4a:f8:46:7f:46:0b:4a:e6:
7e:fb:8e:d7:16:a1:16:2b:bb:f8:9d:52:6a:c0:4b:0d:8e:c2:
11:6e:0a:a8:87:ef:34:b8:c5:48:f5:d2:09:ce:78:90:91:33:
9a:4d:8e:9e:98:1e:5a:7c:d4:14:73:3c:1b:68:0a:ac:bb:af:
38:23:50:12:c7:0c:61:e7:41:41:34:61:a9:5f:06:30:86:90:
1f:37:4b:3e:44:ee:0a:0d:33:4b:e5:d2:47:8b:c8:04:86:73:
f4:c7:57:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:08:52 2026 by rpki-client